Least privilege and need-to-know
Operational access is governed according to role, authorised purpose and reasonable necessity.
Information Security
Security supports confidentiality, integrity and controlled operational use.
VLC’s public security position explains the control areas used to govern access, authentication, devices, data handling, monitoring, continuity and incident response without publishing sensitive implementation details.
Core security control areas
Security supports confidentiality, integrity and controlled operational use.
Public assurance describes the control areas without exposing security-sensitive implementation detail.
Credential and authentication safeguards
Access to governed environments should use controls appropriate to the operational context.
Endpoint and remote-work safeguards
Operational devices and remote environments should be managed to reduce unauthorised access or disclosure.
Controlled processing and transfer
Client and operational information should remain within authorised handling boundaries.
Auditability and operational review
Governance-sensitive activity may be logged or reviewed where appropriate.
Continuity, backup and recovery
Operational continuity and recovery expectations are governed according to applicable requirements.
Detection, containment and review
Material incidents follow controlled assessment, containment, evidence preservation, recovery and review processes.
Security assurance
Enough information to understand the control posture — without exposing the defence.
Passwords, network topology, endpoint configurations, security logs, detailed escalation contacts, incident playbooks and other sensitive technical controls are not appropriate public website content.
Need security information for procurement or due diligence?
Use the Trust Center for the wider assurance context, or contact us where a review requires controlled additional information.
Contact Us